---
typeId: req
recordId: benac-auth-008
fields:
  title: Agent authentication cannot self-authorize
  statement: Agent authentication shall not allow agents to grant themselves
    package trust, capability grants, secret access, storage leases, compute
    leases, decryption authority, plaintext disclosure authority, or policy
    mutation authority.
  rationale: Agent authentication should make experimentation attributable without
    turning identity into authority. Agents may build, test, invoke, and request power,
    but approval and escalation remain separate Local Policy decisions.
  verification: Authenticate an agent and verify that attempts to self-approve
    sensitive authority fail closed or create pending requests only.
  testable: true
  status: draft
  area: BENAC-AUTH
  sourceDocument: /home/johnb/Downloads/benac_syrs_v0_4_integrated_authentication.md
  sourceVersion: v0.4
  sourceSections:
    - 10.2 Authentication and authority boundaries
  order: 23
---
